ultrabaserpc[.]com

Analysis of ultrabaserpc.com indicates that the domain was registered on October 01, 2025 through Cosmotown, Inc. and is hosted on Cloudflare infrastructure (AS13335) with the IPv4 address 172.67.210.149. The authoritative nameservers are nitin.ns.cloudflare.com and stephane.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. No TLS certificate was observed for the domain, implying that any web service would be delivered over plain HTTP. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence that the site is malicious.

Multiple security products have flagged the domain. VirusTotal reports that 15 of 95 scanning engines identified the domain as malicious, and the domain is listed on two public blocklists, specifically PhishDestroy and ScamSniffer. The listed scam type is “Crypto Scam,” which aligns with the generic phishing classification. The domain’s current HTTP status is offline; the site has been taken down, but the infrastructure remains observable via DNS resolution.

The evidence suggests that ultrabaserpc.com was likely used as part of a cryptocurrency‑related phishing campaign, possibly to harvest credentials or lure victims into sending funds. The combination of a recent registration date, zero trust score, lack of SSL, and multiple vendor detections points to a purpose‑built malicious site rather than an accidental compromise. Defenders should add the domain and its resolving IP address to block lists, monitor DNS queries for any resurgence, and ensure that any outbound traffic to the IP is denied. Continuous re‑evaluation is advised in case the operators reactivate the site or shift to a new domain.